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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

1-9. (Canceled) 

10. (Currently Amended) A method for providing access managem e nt to a 
secured item , comprising: 

authenticating a user to a first and a s e cond server machine, whereby th e 
first and the s e cond s e rv e r machines are configured to compris e a having the 
secured item stored therein ; 

preventing access to [[the]] a second server machin e having the secured 
item stored therein while the user is accessing the first server machine through a 
fir s t connectio n from a first location ; and 

upon receiving an access request from the user to access the second server 
machin e from a second location , authenticating the user to the second server, and 
disconnecting the user from the first conn e ction server b efore establishing a 
second connection that allows the user to access the second server machin e. 

11. (Currently Amended) The method as recited in claim [[29]] 10, wherein 
the authenticating [[the]] a user comprises authenticating both the user and a client 
machine being used by the user. 

12. (Currently Amended) The method as recited in claim 10, wherein the 
first and the second s e rver machines servers are access points for the user to gain access 
to the secured item. 
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13. (Currently Amended) The method as recited in claim 29, wherein: 
when the user is at [[a]] the first location, the user interacts over a network 

with the first server machine , and 

when the user is at [[a]] the second location, the user interacts over a 
network with the second server machine using a second client machine at the 
second location. 

14. (Currently Amended) The method as recited in claim 10, wherein the 
method further comprises comprising : 

determining, prior to disconnecting the user from the first connection 
server , whether the user is permitted to gain access through [[a]] the second 
location to the secured item via the second server machine . 

15. (Currently Amended) The method as recited in claim 29, wherein the 
authenticating the user with the first server occurs while the user is at [[a]] the first 
location, and wherein the receiving the access request occurs while the user is at [[a]] the 
second location. 

16. (Currently Amended) The method as recited in claim 17, wherein the 
[[the]] authenticating the user to the second server further comprises: 

upon receiving the access request to access the secured item via the 
second server machin e, determining permitted locations from which the user is 
permitted to access the secured item; 

determining whether the second location is one of the permitted locations 
for the user; and 
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bypassing the disconnecting the user from the first connection 

server in response to the determination that the second location is not one of the 

permitted locations for the user. 

17. (Currently Amended) The method as recited in claim 30, wherein: 
when the user is at [[a]] the first location, the user interacts over a network 

with the first server machine using a first client machine at the first location, and 

when the user is at [[a]] the second location, the user interacts over a 
network with the second server machin e using a second client machine at the 
second location. 

18. (Currently Amended) A computer readabl e tangible computer-readable 
medium containing having stored thereon, computer-executable instructions for 
controlling at least on e proc e ssor by that, if executed by a computing device, cause the 
computing device to perform a method^ comprising: 

authenticating a user to a first and a s e cond server machin e , wh e r e by th e 
first and the s e cond serv e r machines ar e configur e d to compris e having a secured 
item stored therein ; 

preventing access to [[the]] a second server machin e having the secured 
item stored therein while the user is accessing the first server machine through a 
first conn e ctio n from a first location ; and 

upon receiving an access request from the user to access the second server 
machin e from a second location, authenticating the user to the second server, and 
disconnecting the user from the first conn e ction server before establishing a 
second connection that allows the user to access the second server machine . 
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1 9. (Currently Amended) The computer readabl e tangible computer-readable 
medium as recited in claim 31, wherein: 

when the user is at [[a]] die first location, the user interacts over a network 
with the first server machine , and 

when the user is at [[a]] the second location, the user interacts over a 
network with the second server machin e using a second client machine at the 
second location. 

20. (Currently Amended) The comput e r r e adable tangible computer-readable 
medium as recited in claim 32, further comprising: 

determining, prior to the reconfiguring of either the first local module at 
the first server machine or the second local module at the second server machine , 
whether the user is permitted to gain access from [[a]] the second location to the 
secured item via the second server machin e. 

21. (Currently Amended) A system for providing controlling access 
management to a secured item, comprising: 

an access control device, wherein the access control device authenticates a 
user to a first and a second server machin e , wh e reby th e first and th e second 
server machines are configured to compris e a having the secured item stored 
therein , and prevents access to [[the]] a second server machine while the user is 
accessing the first server machin e through a first conn e ction from a first location , 
and, upon receiving an access request from the user to access the second server 
machin e from a second location , authenticates the user to the second server, and 
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disconnects the user from the first connection server before establishing a s e cond 

connection that allows the user to access the second server machine . 

22. (Currently Amended) The computer readable tangible computer-readable 
medium as recited in claim 31, wherein authenticating [[a]] the user comprises 
authenticating both the user and a client machine being used by the user. 

23. (Currently Amended) The computer readabl e tangible computer-readable 
medium as recited in claim 32, further comprising: 

determining, prior to the reconfiguring the first local module at the first 
server machine and the second local module at the second server machine , 
whether the user is permitted to gain access from [[a]] the second location to the 
secured item via the second server machin e. 

24. (Currently Amended) The computer readabl e tangible computer-readable 
medium as recited in claim 33, wherein the authenticating the user to the second server 
further comprises: 

upon receiving the access request to access the secured item via the 
second server machin e, determining permitted locations from which the user is 
permitted to gain access to the secured item; 

determining whether the second location is one of the permitted locations 
for the user; and 

bypassing the disconnecting the user from the first conn e ction server in 
response to the determination that the second location is not one of the permitted 
locations for the user. 
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25. (Previously Presented) The system as recited in claim 21 , wherein the 
access control device authenticates both the user and a client machine being used by the 
user. 

26. (Currently Amended) The system as recited in claim 21, wherein the 
first and the second server machin e s servers are access points for the user to gain access 
to the secured item. 

27. (Currently Amended) The system as recited in claim 35, wherein the 
access control device determines, prior to reconfiguring the first local module at the first 
server machin e and the second local module at the second server machin e, whether the 
user is permitted to gain access from [[a]] the second location to the secured item via the 
second server machin e. 

28. (Canceled) 

29. (Currently Amended) The method as recited in claim 1 0, wherein th e 
authenticating the user comprises further comprising : 

authenticating the user with the first server machin e with respect to a 
previous access request; 

subsequently receiving the access request via the second server machin e; 

and 

authenticating the user with the second server machin e with respect to the 
access request. 
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30. (Currently Amended) The method as recited in claim 29, wherein the 
disconnecting the user from the first conn e ction server comprises: 

upon receiving the access request via the second server machine , 
identifying a first local module previously supporting the user at the first server 
machin e; 

reconfiguring the first local module at the first server machin e to remove 
support for the user at the first server machine ; 

identifying a second local module to support the user at the second server 
machin e; and 

reconfiguring the second local module at the second server machin e to 
add support for the user at the second server machin e. 

3 1 . (Currently Amended) The computer readabl e tangible computer-readable 
medium as recited in claim 18, wherein th e auth e nticating th e user comprise s further 
comprising : 

authenticating the user with the first server machin e with respect to a 
previous access request; 

subsequently receiving the access request via the second server machine ; 

and 

authenticating the user with the second server machine with respect to the 
access request. 

32. (Currently Amended) The comput e r readable tangible computer-readable 
medium as recited in claim 31, wherein the disconnecting the user from the first 
conn e ction server comprises: 
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upon receiving the access request via the second server machine , 

identifying a first local module previously supporting the user at the first server 

machin e; 

reconfiguring the first local module at the first server machin e to remove 
support for the user at the first server machin e; 

identifying a second local module to support the user at the second server 
machin e; and 

reconfiguring the second local module at the second server machin e to 
add support for the user at the second server machin e. 

33. (Currently Amended) The computer readabl e tangible computer-readable 
medium as recited in claim 32, wherein: 

when the user is at [[a]] the first location, the user interacts over a network 
with the first server machin e using a first client machine at the first location, and 

when the user is at [[a]] the second location, the user interacts over a 
network with the second server machine using a second client machine at the 
second location. 

34. (Currently Amended) The system as recited in claim 21, wherein the 
access control device: 

authenticates the user with the first server machin e with respect to a 
pervious access request; 

subsequently receives the access request via the second server machin e; 

and 
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authenticates the user with the second server machin e with respect to the 

access request. 

35. (Currently Amended) The system as recited in claim 34, wherein the 
access control device: 

identifies a first local module previously supporting the user at the first 
server machine upon receiving the access request to access the secure item via the 
second server machine ; 

reconfigures the first local module at the first server machin e to remove 
support for the user at the first server machine ; 

identifies a second local module to support the user at the second server 
machin e; and 

reconfigures the second local module at the second server machine to add 
support for the user at the second server machine . 
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